SSA-496604 V1.0: Cross-Site Scripting Vulnerability in Mendix SAML Module

Risk Summary

<p>The Mendix SAML module is affected by a reflected cross-site scripting (XSS) vulnerability that could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Apps are only vulnerable in certain cases when non-default configuration is used.</p> <p>Siemens has released updates for the affected products and recommends to update to the latest versions.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)